Owner's Manual

Chapter 17. Security | 483
NETGEAR 8800 User Manual
read-only access to the user. Different implementations of RADIUS handle attribute
transmission differently. You should consult the documentation for your specific
implementation of RADIUS when you configure users for read-write access.
NETGEAR VSAs
Table 51 contains the Vendor Specific Attribute (VSA) definitions that a RADIUS server can
send to a NETGEAR switch after successful authentication. These attributes must be
configured on the RADIUS server along with the NETGEAR Vendor ID, which is 1916.
Table 51. VSA Definitions for Web-Based, MAC-Based, and 802.1x Network Login
VSA Attribute
Type
Format Sent-in Description
NETGEAR-CLI-
Authorization
201 Integer Access-Accept Specifies whether command authorization is
to be enabled or disabled for the user on the
XCM8800 switch.
NETGEAR-Shell-
Command
202 String
NETGEAR-Netlogin-
VLAN-Name
203 String Access-Accept Name of destination VLAN after successful
authentication (must already exist on
switch).
NETGEAR-Netlogin-URL 204 String Access-Accept Destination web page after successful
authentication.
NETGEAR-Netlogin-
URL-Desc
205 String Access-Accept Text description of network login URL
attribute.
Netgear-Netlogin-Only 206 Integer Access-Accept Indication of whether the user can
authenticate using other means, such as
telnet, console, SSH, or Vista. A value of “1”
(enabled) indicates that the user can only
authenticate via network login. A value of
“0” (disabled) indicates that the user can
also authenticate via other methods.
Netgear-Netlogin-VLAN-
ID
209 Integer Access-Accept ID of destination VLAN after successful
authentication (must already exist on
switch).
Netgear-Netlogin-
Extended-VLAN
211 String Access-Accept Name or ID of the destination VLAN after
successful authentication (must already
exist on switch).
Note: When using this attribute,
specify whether the port should
be moved tagged or untagged to
the VLAN. See the guidelines
listed in the section
VSA 211:
NETGEAR-Netlogin-Extended-
Vlan on page 487 for more
information.